CVE-2026-73483

creationtimestamp| type| source ---|---|--- 2026-08-13 13:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxqtt5huv24 2026-08-16 04:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt6emtk7sq2e 2026-08-17 16:45:14+00:00| seen|...

CVE-2026-73483 Flowise before 3.1.3 Sandbox Escape via Puppeteer

Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...